Malicious code in leggings (npm)

The package leggings was found to contain malicious code...